Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57ca92d4afa42d64005789c75b2031386c81b780.roa
File:                     57ca92d4afa42d64005789c75b2031386c81b780.roa (raw, json)
Hash identifier:          pcP8YiEj4NzYMG/oAy3F25ti8Zqxs9yVQ7ax2DdFSxk=
Subject key identifier:   5A:96:F6:FD:40:CD:69:DC:05:B4:06:77:A3:CE:FE:16:18:06:EA:C6
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       11E109
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57ca92d4afa42d64005789c75b2031386c81b780.roa
Signing time:             Tue 07 Nov 2023 07:30:01 +0000
ROA not before:           Tue 07 Nov 2023 07:30:01 +0000
ROA not after:            Thu 06 Nov 2025 07:30:01 +0000
asID:                     265504
IP address blocks:        168.0.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171721 (0x11e109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  7 07:30:01 2023 GMT
            Not After : Nov  6 07:30:01 2025 GMT
        Subject: CN=57ca92d4afa42d64005789c75b2031386c81b780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:01:ee:d0:8c:4d:0d:01:f7:66:a9:87:9a:
                    31:72:e6:3e:e7:3a:cc:bc:31:f4:5b:6c:82:6c:64:
                    6d:8e:65:a5:53:78:52:a3:47:43:a4:24:e8:85:5c:
                    4c:5e:7d:d2:91:6b:14:76:8a:2f:94:22:5e:c7:4d:
                    6a:4c:9e:a9:f3:aa:35:c0:a9:7c:bf:bb:a9:aa:81:
                    7f:15:9d:07:c2:37:60:7f:8f:30:eb:b3:d8:2f:be:
                    a3:15:f2:3e:ef:bf:85:7b:18:81:bd:66:17:e7:53:
                    6f:fb:ec:03:e7:49:a7:75:03:65:e6:1f:59:0a:13:
                    7d:51:d2:8a:da:5e:1d:80:59:9e:50:a7:5e:ff:fb:
                    a8:c5:7f:6d:78:0b:0a:8e:10:31:7f:f2:5c:0f:0f:
                    c7:65:4e:1f:37:fc:f3:34:97:16:4f:86:f2:fb:6e:
                    85:98:59:ab:de:73:3c:fb:d0:62:15:7a:f8:eb:14:
                    07:00:8d:53:c2:70:2e:5e:65:82:a7:8f:7e:8f:0e:
                    b8:50:a4:1d:14:37:e7:59:e9:cd:c7:a6:af:3a:c6:
                    81:4e:11:0c:b3:f9:66:18:59:08:02:f0:8a:f1:dc:
                    9c:f7:0c:09:45:d2:10:2d:3c:03:d4:f9:ef:a6:43:
                    d8:91:fd:66:22:80:f7:2e:0c:c1:ac:50:e2:7e:9f:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:96:F6:FD:40:CD:69:DC:05:B4:06:77:A3:CE:FE:16:18:06:EA:C6
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57ca92d4afa42d64005789c75b2031386c81b780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:f2:e9:d8:58:ee:32:36:54:7d:6b:d9:84:66:5a:0e:8b:
         3f:b6:9f:ec:33:92:92:39:19:e7:f4:89:18:af:34:a0:8b:dc:
         48:69:35:da:14:90:c4:78:70:87:91:71:d8:ac:75:a8:8c:fa:
         8b:a8:2f:82:79:f4:c9:dc:77:a7:68:87:01:7b:f2:10:81:5b:
         7f:05:37:97:9a:0f:7f:da:d2:9e:07:34:c9:f7:40:5f:d9:5f:
         06:ab:82:c5:7e:1a:21:5d:0a:04:dd:39:b0:9a:46:af:6b:1b:
         fa:29:17:e8:5c:18:66:69:6c:dc:35:59:e5:a3:4d:77:25:d2:
         98:8e:30:b9:ac:69:4b:54:40:25:79:84:18:be:6e:34:75:5f:
         e0:cc:66:c1:d4:8a:d9:e9:aa:c7:ed:a3:31:5d:fe:a4:90:0d:
         0e:b4:1c:c9:69:10:eb:fd:3d:d9:35:4c:3f:a4:cc:4b:28:28:
         50:6d:be:1b:71:1c:18:55:69:68:d3:88:e9:70:4a:b6:39:90:
         d8:10:e2:49:4b:b9:7a:bd:84:1e:7f:70:12:0b:b5:f6:b0:73:
         41:64:ce:e9:cb:d9:ff:ae:5f:ed:4a:95:8f:12:2c:8f:c9:ee:
         30:04:e2:b8:8c:4f:3f:b1:84:f1:d8:b3:e5:1a:d7:50:7a:c2:
         ce:76:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org